Static task
static1
Behavioral task
behavioral1
Sample
1b0c6a6c054f9913456c2340c5b977e4db70f548bb761a247ac997ed5aaa0565.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1b0c6a6c054f9913456c2340c5b977e4db70f548bb761a247ac997ed5aaa0565.exe
Resource
win10v2004-20221111-en
General
-
Target
1b0c6a6c054f9913456c2340c5b977e4db70f548bb761a247ac997ed5aaa0565
-
Size
4.2MB
-
MD5
7e50f7be375d446ac3f2384325232980
-
SHA1
43c16cb18a5e825fd796ed435f228d8f55771d2e
-
SHA256
1b0c6a6c054f9913456c2340c5b977e4db70f548bb761a247ac997ed5aaa0565
-
SHA512
ebfeb66b5ce554a1594f1e22a399a38cf85442fa4ecfb312e8d56787fcebbbbe8ce7041bbfa8e277dc5b2515dc555a870bf19ce39219bcdeb8885e2ba237c8ed
-
SSDEEP
49152:YPNexh0PvmaZ/aspZTOu+75oc4CbRlu+eBl9KjgFB:KPvme/jV+7ScPvsBl9Kj
Malware Config
Signatures
Files
-
1b0c6a6c054f9913456c2340c5b977e4db70f548bb761a247ac997ed5aaa0565.exe windows x86
270618d2014e83f26d7d13f037632e74
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
GetFileAttributesA
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
FileTimeToSystemTime
IsBadReadPtr
GetProcessHeap
HeapAlloc
CreateMutexA
GetModuleHandleExW
InitializeCriticalSection
GetLastError
GetTickCount
InterlockedCompareExchange
ExitProcess
SetLastError
GetVersionExA
GetModuleHandleA
LeaveCriticalSection
ResumeThread
VirtualAlloc
VirtualFree
GetTempPathA
LoadLibraryA
GetProcAddress
GetCurrentThread
FileTimeToLocalFileTime
RemoveDirectoryA
ExitThread
DeleteCriticalSection
GetLocalTime
DisableThreadLibraryCalls
SystemTimeToFileTime
GetCurrentThreadId
HeapFree
HeapReAlloc
Sleep
ReadFile
WriteConsoleW
CreateFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
LoadLibraryExW
SetEndOfFile
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetStringTypeW
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
advapi32
RegCreateKeyW
RegEnumKeyExA
RegQueryValueExW
RegEnumKeyExW
RegQueryValueA
RegEnumValueA
RegCloseKey
RegOpenKeyExA
RegEnumKeyA
RegQueryValueW
RegCreateKeyA
RegEnumKeyW
RegQueryValueExA
RegEnumValueW
RegQueryInfoKeyA
user32
GetDlgItem
LoadIconA
BringWindowToTop
GetWindowTextA
GetCursorPos
MessageBoxW
GetMessageW
UpdateWindow
TrackPopupMenu
CreateWindowExW
SetFocus
PostQuitMessage
GetParent
DefWindowProcW
RedrawWindow
CreatePopupMenu
SendMessageA
SendMessageW
SetWindowPos
FindWindowA
TranslateMessage
MsgWaitForMultipleObjects
GetMessageA
CreateWindowExA
PostMessageW
SetForegroundWindow
GetDesktopWindow
RegisterClassExA
AppendMenuW
CloseDesktop
CheckMenuItem
RegisterWindowMessageA
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ